Crack5 with trusted system

[Michael Ernstoff]

Has anyone used Crack5 on an HP-UX 10.20 trusted system?

The documentation seems to say that you need a single password file (rather than the distributed tcb entries).
Is there a script to build a "shadow" password file?

What is the difference between version 5 and 5a, and how do I tell which one is installed on the server I am looking at?

Thanks

[Dan Hetzel]

Hi,

You definitely need a single password file for use with crack.

Dan

[Edgar Matzinger · Accepted solution]

As Dan said: You need a single password file.
If Crack5 uses crypt(3c) to check for passwords
you can use this awk script to produce a single
file:

I'm sorry if the code a bit obfuscated but what
happens is that for every line in the
/etc/passwd file the password is extracted from
the /tcb files. Oh, and you need to run this
script as root.

[David Lodge]

Attached is the bit of shell I use to do a similar job - this takes /etc/passwd and returns a 'new' passwd to the screen!

One word of advice Crack is a *very* dangerous program to have sitting around on your machines, as are the 'remade' passwd files.

I run this program on a seperate workstation which only people who normally have root level access have access to.